reports
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard Frappe reporting functionalities (Report Builder, Query Reports, and Script Reports). Analysis of the code examples confirms they follow security best practices, such as using parameterized SQL queries to prevent injection attacks.
- [SAFE]: A comprehensive 'Guardrails' section is included, explicitly instructing developers to validate inputs, use
frappe.db.escape(), and implement mandatory permission checks (frappe.has_permission()). - [SAFE]: No malicious patterns such as obfuscation, hidden URLs, credential harvesting, or unauthorized remote code execution were identified.
Audit Metadata